On Friday, August 12, 2005, 1:54:05 AM, dirk dirk wrote: > Just that nobody forgets: > What about false positives? 158.194.144.219 apparently belogs to Palacky > University in Olomouc,Czechia. This IP is now wrongfully listed in SURBL!
> I'll post that problem to the SURBL-List as well, I think. Jeff C. > certainly doesn't want to harm innocent bystanders... > Dirk FPs on IP addreses are highly unlikely because: 1. Most URIs don't use IP addresses. How often do you see http://219.144.194.158/ in a legitimate mail or as a legitimate URI? Pretty much only in phishing spams. Most people use domain names in URIs, and probably never this IP address. 2. As Raymond notes, this IP is probably some hacked student workstation. It probably doesn't host any legitimate sites. 3. SURBL applications are not supposed to do name resolution, so even if http://www.some-legitimate-site.com/ resolved to 219.144.194.158 (which probably none do), that name would still not cause a spam hit. So this is very likely a non-issue. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
